| Max CVSS | 9.0 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-8356 | 6.5 |
The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related to an insecure direct object reference.
|
04-12-2019 - 20:25 | 21-11-2019 - 22:15 | |
| CVE-2014-9118 | 9.0 |
The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.
|
09-10-2018 - 19:54 | 17-10-2017 - 16:29 | |
| CVE-2014-8357 | 4.0 |
backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backup
|
09-10-2018 - 19:53 | 17-10-2017 - 16:29 |